NEWS

Author: picnixz

Doc/whatsnew/3.15.rst

@@ -518,6 +518,16 @@ unittest
   (Contributed by Garry Cairns in :gh:`134567`.)
 
 
+xml.parsers.expat
+-----------------
+
+* Add :func:`~xml.parsers.expat.xmlparser.SetAllocTrackerMaximumAmplification`
+  and :func:`~xml.parsers.expat.xmlparser.SetAllocTrackerActivationThreshold`
+  to :class:`~xml.parsers.expat.xmlparser` objects to prevent use of
+  disproportional amounts of dynamic memory from within an Expat parser.
+  (Contributed by Bénédikt Tran in :gh:`90949`.)
+
+
 zlib
 ----
 

Misc/NEWS.d/next/Library/2025-09-22-14-40-11.gh-issue-90949.UM35nb.rst

@@ -0,0 +1,5 @@
+Add :func:`~xml.parsers.expat.xmlparser.SetAllocTrackerMaximumAmplification`
+and :func:`~xml.parsers.expat.xmlparser.SetAllocTrackerActivationThreshold`
+to :class:`~xml.parsers.expat.xmlparser` objects to prevent use of
+disproportional amounts of dynamic memory from within an Expat parser. Patch
+by Bénédikt Tran.